AWS acm documentation change
Summary
Updated certificate expiration timelines: Changed DNS validation notice period from 60 to 45 days and reduced certificate validity from 395 days to 198 days.
Security assessment
The changes adjust operational timelines but contain no evidence of addressing security vulnerabilities. Shorter validity periods could indirectly improve security by reducing certificate exposure time, but there's no mention of security incidents or vulnerabilities in the diff.
Diff
diff --git a/acm/latest/userguide/troubleshooting-renewal.md b/acm/latest/userguide/troubleshooting-renewal.md index 1b9bc6177..689dd759f 100644 --- a//acm/latest/userguide/troubleshooting-renewal.md +++ b//acm/latest/userguide/troubleshooting-renewal.md @@ -28 +28 @@ Before ACM can renew your certificates automatically, the following must be true -As the certificate nears expiration (60 days for DNS, 45 for EMAIL and 60 days for Private), ACM attempts to renew the certificate if it meets the [eligibility criteria](./managed-renewal.html). You might have to take actions for the renewal to succeed. For more information, see [Managed certificate renewal in AWS Certificate Manager](./managed-renewal.html). +As the certificate nears expiration (45 days for DNS, 45 for EMAIL and 60 days for Private), ACM attempts to renew the certificate if it meets the [eligibility criteria](./managed-renewal.html). You might have to take actions for the renewal to succeed. For more information, see [Managed certificate renewal in AWS Certificate Manager](./managed-renewal.html). @@ -32 +32 @@ As the certificate nears expiration (60 days for DNS, 45 for EMAIL and 60 days f -ACM certificates are valid for 13 months (395 days). Renewing a certificate requires action by the domain owner. ACM begins sending renewal notices to the email addresses associated with the domain 45 days before expiration. The notifications contain a link that the domain owner can click for renewal. Once all listed domains are validated, ACM issues a renewed certificate with the same ARN. +ACM certificates are valid for 198 days. Renewing a certificate requires action by the domain owner. ACM begins sending renewal notices to the email addresses associated with the domain 45 days before expiration. The notifications contain a link that the domain owner can click for renewal. Once all listed domains are validated, ACM issues a renewed certificate with the same ARN.